使用电子邮件ID从Active Directory查找用户名

时间:2016-08-06 06:22:31

标签: c# c#-4.0 active-directory

我通过传递电子邮件ID从Active Directory中找到用户名。它工作正常。但是获取用户名需要30-40秒。还有其他更好的方法可以通过电子邮件地址从Active Directory中找到用户名吗?

请参阅我的代码:

using (PrincipalContext context = new PrincipalContext(ContextType.Domain, "domainname"))
{
    UserPrincipal userPrincipal = new UserPrincipal(context);
    PrincipalSearcher principalSearch = new PrincipalSearcher(userPrincipal);

    foreach (UserPrincipal result in principalSearch.FindAll())
    {
        if (result != null && result.EmailAddress != null && result.EmailAddress.Equals(user.Email, StringComparison.OrdinalIgnoreCase))
        {
            user.FirstName = result.GivenName;
            user.LastName = result.Surname;
        }
    }
}

2 个答案:

答案 0 :(得分:8)

您不需要枚举所有用户来查找一个!试试这段代码:

using (PrincipalContext context = new PrincipalContext(ContextType.Domain, "domainname"))
{
    UserPrincipal yourUser = UserPrincipal.FindByIdentity(context, EmailAddress);

    if (yourUser != null)
    {
        user.FirstName = result.GivenName;
        user.LastName = result.Surname;
    }
}

如果这不起作用,或者您需要一次搜索多个条件,请使用PrincipalSearcher和QBE(按示例查询)方法 - 搜索您需要的一个用户 - 不要遍历所有用户!

// create your domain context
using (PrincipalContext context = new PrincipalContext(ContextType.Domain, "domainname"))
{    
   // define a "query-by-example" principal - 
   UserPrincipal qbeUser = new UserPrincipal(ctx);
   qbeUser.EmailAddress = yourEmailAddress;

   // create your principal searcher passing in the QBE principal    
   PrincipalSearcher srch = new PrincipalSearcher(qbeUser);

   // find all matches
   foreach(var found in srch.FindAll())
   {
       // do whatever here - "found" is of type "Principal" - it could be user, group, computer.....          
   }
}

答案 1 :(得分:0)

using System.DirectoryServices.AccountManagement;

// Lock user
using (PrincipalContext context = new PrincipalContext(ContextType.Domain))
{
    UserPrincipal yourUser = UserPrincipal.FindByIdentity(context, logonName);
    if (yourUser != null)
    {
        if(!yourUser.IsAccountLockedOut())
        {
            yourUser.Enabled = False;
            yourUser.Save();
        }
    }
}